Skip to content

Dataset

Verified DDoS records, by metric

Peak bits/s, packets/s and requests/s records, each read from the reporting organisation’s own publication. Deliberately not a single ranked list: a terabits figure and a requests-per-second figure measure different things.

Rows
7
Last updated
2026-08-15
Schema version
1.0
Download
JSON·CSV

Do not read this as a ranking. A bits-per-second record and a requests-per-second record measure different things and cannot be ordered against each other, and every figure was measured by one provider across its own customers — so a provider absent from a row did not necessarily see a smaller attack.

Verified DDoS records, by metric

MetricPeakDateReported byObservation scopeTargetVectorAttributionSource
peak bits/s31.4 Tbps2025-Q4CloudflareCloudflare's own network and customer base onlynot publicly identifiednot stated in the summary read for this entryconfirmed by reporterblog.cloudflare.com/ddos-threat-report-2025-q4
peak bits/s7.3 Tbps2025-05CloudflareCloudflare's own network and customer base onlya Cloudflare customer, not publicly identifiedmulti-vector; described in the linked breakdownconfirmed by reporterblog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos
peak bits/s6.5 Tbps2025-Q1CloudflareCloudflare's own network and customer base onlynot publicly identifiednot stated in the summary read for this entryconfirmed by reporterblog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos
peak packets/s4.8 billion pps2025-Q1CloudflareCloudflare's own network and customer base onlynot publicly identifiednot stated in the summary read for this entryconfirmed by reporterblog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos
peak requests/s398 million rps2023-08Google CloudGoogle Cloud's own infrastructure and customer base onlya Google Cloud customer, not publicly identifiedHTTP/2 Rapid Reset (CVE-2023-44487)confirmed by reportercloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps
peak requests/s201 million rps2023-08CloudflareCloudflare's own network and customer base onlya Cloudflare customer, not publicly identifiedHTTP/2 Rapid Reset (CVE-2023-44487)confirmed by reporterblog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack
peak requests/s46 million rps2022-06Google CloudGoogle Cloud's own infrastructure and customer base onlya Google Cloud customer, not publicly identifiedHTTPS floodconfirmed by reportercloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps

Sources

  1. 2025 Q4 DDoS threat report: a record-setting 31.4 Tbps attack

    Cloudflare · 2026-02-05 · accessed 2026-08-15

  2. Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack

    Cloudflare · 2025-06-19 · accessed 2026-08-15

    Also the source for the 6.5 Tbps and 4.8 billion pps figures it cites from the 2025 Q1 report.

  3. HTTP/2 Rapid Reset: deconstructing the record-breaking attack

    Cloudflare · 2023-10-10 · accessed 2026-08-15

  4. Google Cloud mitigated largest DDoS attack, peaking above 398 million rps

    Google Cloud · accessed 2026-08-15

    Also the source for the earlier 46 million rps record it compares against.

What changed

  • 2026-08-15Initial release: seven records across three metrics, each read from the reporting organisation’s own post.

Reuse: Free to reuse with attribution to ddosmitigationguide.com; source citations must be preserved.